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This application claims priority to German Patent Application 
DE10302074.8 filed January 21, 2003, the entirety of which is 
5 incorporated by reference herein. 

BACKGROUND OF THE INVENTION 
This invention relates to a fault detection logic for an en- 
gine control system to discover any loss of thrust control of 
10 the control loop. 

The control of engine thrust - and thus the control of the 
fuel flow required for the respective thrust - is effected in 
a known control system on the basis of the pressures measured 
at the inlet and at the outlet of the engine as the primary 

15 control parameter and the engine pressure ratio established 
therefrom. A positive difference between the command value and 
the actual value of the pressure ratio indicates an intended 
acceleration of the engine and, thus, an increase in fuel sup- 
ply, while a negative value of the difference between the com- 

20 mand value and the actual value of the engine pressure ratio 
signifies an intended deceleration of the engine and a corre- 
sponding decrease in fuel supply. Another primary control pa- 
rameter is the low-pressure shaft speed. 

Since the required thrust is to be achieved and maintained 
25 with minimum deviation, the fuel metering unit (FMU) is an ex- 
tremely safety-relevant component, this unit delivering that 
quantity of fuel to the engine combustion chamber that corre- 
sponds to the thrust necessary to influence, as desired and 
with minimal fault, the movement and speed of a body attached 
30 to the engine. 
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For the detection of faults and operating states, an elec- 
tronic engine controller (EEC) is integrated in the engine. 
The respective fault detection logic is capable of discovering 
certain incidents, such as the defect of a solenoid installed 
5 in the fuel metering unit for controlling the fuel flow or the 
absence of a feedback signal between the fuel metering unit 
and the electronic engine controller. If a fault is identified 
by the fault detection logic, the redundancy of the system al- 
lows the detection process to be repeated in another lane. If 
10 the initially detected fault is found to re-appear in the sec- 
ond lane, appropriate measures will be taken to eliminate the 
fault, or the engine will be shut down, as applicable. 

In certain cases - for example if voltage conditions in the 
solenoid system of the fuel metering unit are affected by 

15 power supply deficiencies resulting from defects in connecting 
leads, connectors or similar items - the fault detection logic 
will not be able to sense the resultant variations in fuel 
flow. This inability manifests itself in a departure of the 
actual value of thrust and engine pressure ratio from the 

20 specified command value which is not recognized as fault by 
the fault detection logic. In other words, this type of con- 
trol which uses a primary control parameter, here the engine 
pressure ratio, will fail to detect an overshoot or undershoot 
in thrust which is unrelated to the specified command value. 

25 If an engine fails to respond as a result of such a control 
behavior, i.e. a loss, of thrust control without reaction of 
the engine controller or without indication of the malfunc- 
tion, catastrophic consequences may occur. For example during 
the take-off run, an aircraft powered by an engine controlled 

30 according to the described state of the art can overshoot the 
end of the runway if excessive thrust occurs which is unde- 
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tected by the control system, or it may depart from the runway 
if the thrust delivered by the two engines is asymmetrical. 
Undetected excessive thrust of one of the two engines is also 
critical shortly before touchdown, in particular, since the 

5 thrust asymmetry resulting therefrom may cause the aircraft to 
leave the runway. This situation, in which a fuel quantity is 
delivered to the engine combustion chamber which departs from 
the specified command value, is also termed loss of thrust 
control (LOTC) . Since the fault detection system does not rec- 

10 ognize this fault, catastrophic consequences as those de- 
scribed above may occur. Generally, a loss of thrust control 
may occur throughout the flight, however, the consequences can 
be more serious in the above situations than, for example, at 
great altitude. 

15 

BRIEF SUMMARY OF THE INVENTION 
The present invention, in a broad aspect, provides a fault de- 
tection logic for a control system of an engine which safely 
recognizes any loss of thrust control. 

20 It is a particular object of the present invention to provide 
a method in accordance with the failure detection logic de- 
scribed herein. Further objects and advantages of the present 
invention are will be apparent from the description below . 

Accordingly, in the method of the present invention, a first 
25 control parameter with negative or positive sign corresponding 
to acceleration or deceleration is initially determined from 
which the respective control of thrust is then inferred. Since 
this statement does not make allowance for engine defects, for 
example in connection with the power supply of the fuel meter- 
30 ing valve, and a loss of thrust control resulting therefrom is 
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not recognized, a second thrust -dependent positive or negative 
control parameter is determined and established. If a logic 
query establishes that the parameter values determined trans- 
gress at the same time the respective specified threshold 
value, a hang in positive or negative acceleration determined 
by the second control parameter, with simultaneous, definite 
departure of the commanded engine pressure ratio from the ac- 
tual engine pressure ratio, is a clear indication of a loss of 
thrust control and triggers a change-over to a second lane of 
the redundant system and/or an alarm signal. As a first con- 
trol parameter, the difference between the command value and 
the actual value of the engine pressure ratio is used which, 
according to an intended acceleration or deceleration, is ei- 
ther positive or negative. As a second control parameter, the 
positive or negative acceleration of an engine shaft can be 
applied. This method ensures that a loss of thrust control is 
indicated. The method avoids erroneous fault detection by sig- 
nal noise and, in addition, provides measures against false 
indications of loss of thrust control caused by engine surge. 

BRIEF DESCRIPTION OF THE DRAWINGS 
The present invention is more fully described in the light of 
the accompanying drawings showing an embodiment . In the draw- 
ings, 

Fig. 1 is a logic flowchart for the detection of thrust un- 
dershooting a command value for an intended accel- 
eration (underthrust detection - UTDET) , and 

Fig. 2 is a logic flowchart for the detection of thrust 
overshooting a command value for an intended decel- 
eration (overthrust detection - OTDET) . 



DETAILED DESCRIPTION OF THE INVENTION 
The term 11 under thrust 11 as used herein designates a lower 
thrust than that commanded by the pilot via the thrust lever 
setting, while the term "overthrust" conversely refers to a 
5 higher thrust than that commanded. Overthrust and underthrust 
are caused by a fault in the control system and denote a loss 
of thrust control (LOTC) which must be recognized and indi- 
cated and to which the control system must respond appropri- 
ately. 

10 As shown in Fig 1 and Fig 2, the difference +/-EPRerror be- 
tween the command value and the actual value is determined in 
step 1 as the first control parameter from the actual value of 
the engine pressure ratio (EPRactual) between the outlet and 
the inlet of the engine as a measure of the thrust and from 

15 the set command value of the engine pressure ratio (EPRcmd) as 
a measure of the demanded thrust. If the difference is posi- 
tive, more fuel will be delivered via a fuel -metering unit 
(not shown) to the engine combustion chamber and the engine 
will be accelerated. Conversely, a negative difference value 

20 means that the fuel flow is throttled and the engine deceler- 
ated (negative acceleration, thrust decrease) . A definite de- 
viation of +/-EPRerror, thresh between the actual value and the 
command value of the engine pressure ratio is determined in 
step 2 (intended acceleration as per Fig. 1) or step 7 (in- 

25 tended deceleration as per Fig. 2) in a logic module. 

In step 3 (as per Fig. 1 and 2) , a second control parameter 
which also designates the acceleration or deceleration of the 
engine is determined with the acceleration or deceleration +/- 
N2dot of the engine high-pressure shaft and compared as per 
30 steps 4 and/or 8 in a logic module with a specified threshold 
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+/-N2dot, thresh of the positive or negative acceleration of 
the high-pressure shaft. 



A logic query as per steps 5 and 9 establishes if the two pa- 
rameters EPRerror and N2dot simultaneously exceed the speci- 
5 fied thresholds. 

If, as per Fig. 1, both conditions of the logic query 5 are 
satisfied for an intended acceleration, i.e. that with 

EPRerror >EPRerror, thresh and N2dot < N2dot, thresh 

- with EPRerror, thresh = +0,15 and N2dot, thresh = +0,1 %/sec 
10 in the present example - 

the difference of the engine pressure ratio overshoots the 
specified threshold and, simultaneously, the acceleration of 
the high-pressure shaft undershoots the specified threshold, 
the engine actually fails to carry out the intended accelera- 
15 tion. Furthermore, if no engine surge is noted in step 15, an 
underthrust situation has occurred, i.e. a thrust which is too 
low for an intended acceleration. This underthrust situation 
(UTDET) is indicated in step 6. 

Conversely, if both conditions of the logic query 9 are satis- 
20 fied for an intended deceleration as per Fig. 2, i.e. 

EPRerror <EPRerror, thresh and N2dot > N2dot, thresh 

- with EPRerror, thresh = -0,15 and N2dot, thresh = -0,1 %/sec 
in the present example - 

the engine fails to carry out the intended deceleration. Ac- 
25 cordingly, an overthrust situation has occurred, i.e. a thrust 
which is too high for an intended deceleration. As per Fig. 2, 
this overthrust situation (OTDET) is indicated in step 10. 
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Thus, a loss of thrust control for an intended acceleration or 
deceleration of the engine, for example in the case of an un- 
detected defect of the fuel metering valve, can safely be in- 
dicated, this loss of thrust control being reacted upon by the 

5 control system to avoid adverse consequences caused by an - 
actual - thrust situation at the respective engine that does 
not correspond to the intended positive or negative accelera- 
tion. The indication in steps 6 and 10 as the outcome of the 
logic query as per steps 5 and 9 denotes by a signal whether 

10 or not a loss of thrust control of the control system exists, 
with the redundant control system being changed over to an- 
other lane, or the engine being shut down, if a loss of thrust 
control is found to exist also in this other lane, as applica- 
ble. 

15 The thresholds EPRerror, thresh and N2dot, thresh entered in 
steps 11 and/or 12 as per Fig. 1 for determining underthrust 
and in steps 13 and 14 as per Fig. 2 are designated in the 
drawing with -UEPRMN and -UN2DMN or +OEPRMN and +ON2DMN, re- 
spectively, and set such that they represent an underthrust 

20 detection limit or an overthrust detection limit (threshold 
value) , respectively, to avoid disturbances caused by signal 
noise . 

In addition, step 15, which is simultaneously included in the 
fault detection logic, avoids falsification of the statement 
25 made on thrust control, or loss of thrust control, under cer- 
tain conditions, i.e. if engine surge is detected (SRGDET) . 

If a disturbance by the so-called engine surge is noted in 
step 15, in which both conditions of the logic query 5 are 
satisfied, but actually do not represent a loss of thrust con- 
30 trol, the result of the logic query 5 is set to "false" by way 
of a timer and a switch for a certain period of time to avoid 



a loss of thrust control and an underthrust situation being 
erroneously indicated on account of engine surge. 

List of abbreviations used 

EPR Engine pressure ratio 

5 EPRcmd Command value of the engine pressure ratio 

EPRactual Actual value of the engine pressure ratio 

EPRerror EPRcmd - EPRactual (first control parameter) 

N2dot Acceleration of the high-pressure shaft 

(second control parameter) 

10 N2dot, thresh Threshold of the acceleration of the high- 

pressure shaft (UN2DMN, 0N2DMN) 

EPRerror, thresh Threshold of the engine pressure ratio 

(UEPRMN, OEPRMN) 

UTDET Underthrust detection 

15 OTDET Overthrust detection 

SRGDET Detection of engine surge 

LOTC Loss of thrust control 

EEC Electronic control system 



9 



